PawletOS/android_device_brcm_rpi4
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

CEC: fix use-after-free in hdmicec_close

Browse Source 
Fields of 'ctx' are accessed just after it is freed.

Test: manual
Change-Id: I7c3786db9ae618d84149874c72662e4d105765b4
Signed-off-by: Oleg Lyovin <ovlevin@salutedevices.com>
This commit is contained in:
Oleg Lyovin
2024-09-17 15:33:21 +03:00
committed by Konsta
parent 9fdacb0960
commit fb83928d5a
1 changed files with 0 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
cec/hdmi_cec.c
View File

@@ -471,9 +471,6 @@ static int hdmicec_close(struct hdmi_cec_device *dev)
if (ctx->exit_fd > 0) if (ctx->exit_fd > 0)
close(ctx->exit_fd); close(ctx->exit_fd);
free(ctx); free(ctx);
ctx->cec_enabled = false;
ctx->cec_control_enabled = false;
return 0; return 0;
} }